--- title: "Mohammad Abu Mattar" author: "Mohammad Abu Mattar" canonical: https://mkabumattar.com/ --- # Mohammad Abu Mattar AWS-Certified DevOps Engineer with 7+ years specializing in high-scale cloud automation and fintech infrastructure. Expert in governing multi-account AWS environments, orchestrating production microservices, and implementing Infrastructure as Code with a focus on PCI-DSS compliance, security, and operational excellence. ## About AWS-Certified Senior DevOps Engineer with proven expertise in managing 15+ AWS accounts and 20+ production microservices in regulated fintech environments. Specialized in implementing GitOps practices, Infrastructure as Code, and achieving 96% security posture through comprehensive compliance controls. Passionate about building robust, secure cloud solutions using Terraform, Docker, Kubernetes, and modern CI/CD practices. ## Experience ### Cloud & DevOps Manager — Motory · Full-time, Mar 2026 - Present, Al Hamra, Jeddah · Amman, Jordan I run the cloud strategy and platform engineering for Motory, a large automotive marketplace. I manage a multi-cloud environment across AWS, Huawei Cloud, and Hetzner, staying about 70% hands-on with the architecture and code. I lead a DevOps team responsible for the reliability, scalability, and security of our production microservices serving 1M+ active users. I also drive our CI/CD practices, cost optimization efforts, and compliance initiatives in a high-availability, multi-region setup. - **Infrastructure as Code:** Moved everything from manual console clicks to 100% Terraform. I set up GitOps using ArgoCD and Helm to keep our deployments consistent and auditable. - **Modernization:** Led the shift from a monolith to microservices for 1M+ users. I wrote a multi-runtime Helm chart that standardized how we handle scaling, probes, and networking across all services. - **Custom Tooling:** Built a custom Kubernetes operator in Go to solve a specific provisioning problem that standard controllers couldn't handle. This operator is fully integrated into our Helm and ArgoCD delivery flow, ensuring seamless deployments and management of our Kubernetes resources. - **CI/CD & Delivery:** Built pipelines using Jenkins and ArgoCD that improved deployment speed by 60%. This includes a private OCI registry and a Kong API gateway. I also implemented multi-arch builds and automated chart publishing to streamline our release process. - **Reliability & SRE:** We hit 99.999% uptime. I automated cross-region disaster recovery between the Middle East and China using Ansible and the Huawei SDK, and I run our observability stack (Prometheus/Grafana/Loki). On-call runbooks and regular DR drills are part of our routine. - **Cost & Security:** Cut infra costs by 20% while tightening security to meet PCI-DSS and SOC2 standards. This involved identity-as-code via Keycloak and hardening our WAF and VPN. We also use KMS/CSMS for secrets management to ensure our sensitive data is protected. - **Team Leadership:** I lead the DevOps team, focusing on the platform roadmap and internal training for our developers on K8s and Docker. I also handle vendor relationships and ensure our cloud strategy aligns with our business goals. ### Assistant Manager DevOps Engineer — Jordan Ahli Bank · Full-time, Oct 2024 - Feb 2026, Amman, Jordan Serving as Platform Owner for the bank's cloud ecosystem, managing 15+ AWS accounts and 20+ production microservices with a focus on high availability, disaster recovery, and fintech workload optimization in a regulated financial environment. Leading security and compliance efforts with 96% security posture achievement while orchestrating GitOps practices and Infrastructure as Code implementations. - Platform Governance & Reliability: Managing 15+ AWS accounts and 20+ production microservices focusing on high availability, disaster recovery, and fintech workload optimization in regulated environments. - Infrastructure as Code & GitOps: Standardized cloud deployments using Terraform, implementing GitOps practices with ArgoCD via Atlantis for consistent, repeatable releases. Managed autoscaling and resource optimization for production workloads. - Security & Compliance Leadership: Achieved 96% security posture across all AWS accounts implementing IAM Identity Center, AWS Organizations, and strict PCI-DSS compliance controls with CloudTrail, AWS Config, and Security Hub. - Automated CI/CD: Orchestrated end-to-end delivery pipelines using AWS CodePipeline and GitHub Actions, streamlining banking workloads from development to production with automated testing and security scanning. - Release Engineering: Leading weekly releases and hotfix strategies, ensuring zero-downtime deployments through robust rollback and go/no-go decision frameworks across dev, QA, and production. - Production Support & Monitoring: Supporting production microservices through centralized monitoring (Prometheus, Grafana, CloudWatch), incident response workflows, and long-term platform roadmap planning. ### DevOps Engineer — cirrusgo (AWS Partner) · Full-time, Mar 2023 - Sep 2024, Amman, Jordan cirrusgo is an AWS partner delivering cloud solutions to businesses in the MENA region.

Architected and delivered AWS hybrid and on-premises solutions for 8+ enterprise clients including fintech organizations. Designed end-to-end solution architectures balancing cloud-native AWS services with on-premises infrastructure, achieving 25-40% cost optimization while meeting regulatory requirements. - Solution Architecture: Architected AWS hybrid and on-premises solutions for 8+ enterprise clients including fintech organizations. Designed end-to-end architectures (microservices, event-driven, serverless) and optimized cloud costs by 25-40% through right-sizing, reserved instances, and architecture refinements. - IaC Foundation & DevOps Standards: Built foundational Infrastructure as Code using Terraform/Terragrunt patterns and established comprehensive DevOps documentation standards. Implemented multi-account, multi-environment infrastructures using AWS Organizations. - Container Platforms & Deployment: Managed containerized workloads across AWS container services (ECS, Fargate, EKS) spanning 3 environments (dev, UAT, prod). Deployed production applications using GitOps practices and hardened container images. - CI/CD & Automation: Implemented secure CI/CD pipelines using GitHub Actions, AWS CodePipeline/CodeBuild with canary deployments, automated testing, manual approvals, and environment promotion (dev → UAT → prod). - Security & Compliance: Ensured security, access control, and compliance across multi-region cloud deployments (Middle East, US East, Europe) and on-premises environments with automated security scanning and monitoring. ### Software Engineer - Microservices — Nagarro · Contract, Feb 2022 - May 2022, Remote Nagarro is a German-based software services company specializing in consulting, technology, and outsourcing.

Developed fintech microservices architectures using Spring Boot across the full SDLC, integrating PostgreSQL databases for reliable data persistence. Built secure, scalable services for financial transaction processing and data management. - Fintech Microservices: Developed microservices architectures using Spring Boot for financial transaction processing and data management, ensuring secure and scalable services across the full SDLC. - Database Integration: Integrated PostgreSQL databases seamlessly for end-to-end functionality and reliable data persistence in fintech applications. - Full Stack Development: Built front-end components using Angular, HTML, and CSS while resolving production bugs and performance issues to improve system stability. - Technical Documentation: Produced detailed technical documentation to support long-term maintainability and knowledge transfer across development teams. ### Full Stack Developer — Freelance · Full-time, Jan 2020 - Feb 2023, Amman, Jordan · Remote As a freelance Full Stack Developer, I conducted comprehensive client consultations and designed fintech microservices with Spring Boot. Developed responsive web applications using React while managing end-to-end project delivery and client relationships. - Client Consultations & Requirements: Conducted comprehensive client consultations to align project requirements and solutions, ensuring clear communication and alignment with business needs throughout the development lifecycle. - Fintech Microservices & Backend Development: Designed and developed microservices using Spring Boot for fintech applications, integrating PostgreSQL and other databases seamlessly for end-to-end functionality and reliable data persistence. - Responsive Web Development: Created responsive web interfaces and applications using React, HTML, and CSS, focusing on enhancing user experience, performance optimization, and user-friendly designs. - Project Management: Managed project timelines, deliverables, and client expectations to ensure successful project completion and client satisfaction. ### Teacher Assistant/Lab Supervisor — Isra University · Full-time, Dec 2018 - Dec 2019, Amman, Jordan Isra University is a private institution offering undergraduate and postgraduate programs.

At Isra University, I taught C++ programming fundamentals, facilitated lab sessions, and provided technical support to students and faculty. - Developed and maintained C++ lab sessions to enhance students' programming skills. - Provided technical support to students and faculty to resolve programming-related issues. - Assisted students in developing their programming skills through hands-on lab sessions. - Collaborated with faculty to design and update lab curricula. - Monitored and evaluated student progress to provide constructive feedback. ### Web Developer — Greater Amman Municipality · Apprenticeship, Dec 2017 - Feb 2018, Amman, Jordan The Greater Amman Municipality manages Amman's administrative and city planning needs.

At Greater Amman Municipality, I designed and developed web applications for administrative needs, focusing on front-end development with HTML, CSS, and JavaScript. - Developed and maintained web applications to support administrative functions. - Ensured user-friendly interfaces by implementing best practices in front-end development. - Collaborated with the team to gather requirements and deliver solutions that met project goals. - Tested and debugged web applications to ensure functionality and performance. - Provided technical support and training to end-users. ## Education ### AWS Certified Developer – Associate — Amazon Web Services (AWS), Issued Feb 2024 · Expires Feb 2027 Validated expertise in developing and maintaining AWS-based applications, including proficiency in core AWS services, application lifecycle management, and deployment best practices. ### AWS Certified Cloud Practitioner — Amazon Web Services (AWS), Issued Oct 2023 · Expires Feb 2027 Demonstrated foundational knowledge of AWS Cloud concepts, services, pricing, security, and architecture ideal for technical and non-technical roles. ### AWS Academy Graduate - AWS Academy Cloud Foundations — Amazon Web Services (AWS), Issued Nov 2022 Completed a comprehensive introduction to AWS Cloud, covering compute, networking, databases, and storage, aligned with industry-recognized certifications. ### Advanced Software Development — Code Fellows, Issued Sep 2021 Focused on advanced programming concepts, testing, and full-stack application development using modern tools and frameworks in collaborative agile environments. ### Bachelor of Technology - BTech, Software Engineering — Isra University, Oct 2014 - June 2018 Studied core software engineering principles, data structures, algorithms, and system design. Gained hands-on experience in programming, databases, and software development life cycle (SDLC).

Achievements: First place winner in individual project at annual Technology Day contest. Contributed to establishment and growth of Faculty of Information Technology Club. ## Projects ### QuenchWorks — 0-CVE Hardened Images & Helm Charts A from-scratch, security-first replacement for the Bitnami catalog: container images and Helm charts built entirely from source on Wolfi, hardened under a strict 0-CVE build gate, cryptographically signed, and pinned by digest. Free, independent, and fully self-hostable. Technologies: apko, melange, Wolfi, Helm, Kubernetes, Trivy, Cosign, SLSA, Go, AstroJS - [Live Site](https://quench-works.com/) - [ArtifactHub (Verified Publisher)](https://artifacthub.io/orgs/quenchworks) - [GitHub Organization](https://github.com/quenchworks) - [Charts](https://github.com/quenchworks/charts) - [Common (library chart)](https://github.com/quenchworks/common) - [Website](https://github.com/quenchworks/website) ### sysdesign — System Design Knowledge for AI Agents A Claude Code plugin that wires tradeoff-first system design knowledge into your AI agent: one skill, eleven commands, and fourteen self-contained reference files. Explain a concept, compare options, pressure-test an architecture, estimate capacity, or prep an interview — with every tradeoff stated, not hand-waved. Original prose, MIT-licensed, works fully offline. Technologies: Claude Code, Markdown, Python, Mermaid - [Live Site](https://sysdesign.mkabumattar.com/) - [View Source](https://github.com/mkabumattar/sysdesign) ### Mathematics - Formula Reference A clean, searchable web reference for mathematical formulas across algebra, geometry, trigonometry, and calculus. It cuts the clutter most references bury you in, rendering formulas with server-side KaTeX on focused topic pages with no accounts, tracking, or ads. Technologies: AstroJS, TypeScript, Tailwind CSS, React, KaTeX, MDX - [Live Documentation](https://mathematics.mkabumattar.com/) - [View Source](https://github.com/MKAbuMattar/mathematics) ### NetCalc Pro NetCalc Pro Cloud Engineering Suite is a comprehensive web application designed to simplify and enhance the process of subnetting, CIDR calculations, and VLSM. It features a Zero Trust, no-backend architecture with a Terminal Brutalist UX, allowing network engineers to seamlessly manage infrastructure, share state via Base64 URLs, and utilize a powerful set of tools without requiring a backend server. Technologies: AstroJS, TypeScript, Tailwind CSS, Nanostores - [Live Documentation](https://netcalc-pro.mkabumattar.com/) ### Rawi - AI CLI Documentation Tool An intelligent CLI tool that generates comprehensive documentation for command-line applications using AI. Rawi analyzes your CLI commands and creates detailed, structured documentation automatically. Technologies: TypeScript, Node.js, AI/ML, CLI, NPM - [Live Documentation](https://rawi.mkabumattar.com/) - [View Source](https://github.com/withrawi/rawi) - [NPM Package](https://www.npmjs.com/package/rawi) ### AWS Icons - SVG Icon Library A comprehensive, free SVG icon library of all AWS services. Constantly updated with new services and available via CDN or NPM for seamless integration. Perfect for any web project needing AWS service icons. Technologies: SVG, CDN, NPM, Web - [Live Documentation](https://aws-icon.mkabumattar.com/icons) - [View Source](https://github.com/MKAbuMattar/aws-icons) - [NPM Package](https://www.npmjs.com/package/aws-icons) ### AWS React Icons - React Components Library AWS service icons as React components with TypeScript support. Built on top of aws-icons, providing a seamless React experience with full type definitions and easy customization. Technologies: React, TypeScript, SVG, NPM - [Live Documentation](https://aws-icon.mkabumattar.com/react) - [View Source](https://github.com/MKAbuMattar/aws-react-icons) - [NPM Package](https://www.npmjs.com/package/aws-react-icons) ### Devicons React - Programming Icons Library A comprehensive collection of icons representing programming languages, design tools, and development software, built on top of Devicon. Perfect for React projects with 5k+ weekly downloads on NPM. Customizable size and color with optimized performance. Technologies: React, TypeScript, SVG, NPM, Devicon - [Live Documentation](https://devicons-react.mkabumattar.com/) - [View Source](https://github.com/MKAbuMattar/devicons-react) - [NPM Package](https://www.npmjs.com/package/devicons-react) ### igntui - .gitignore Generator TUI A powerful Terminal User Interface (TUI) and CLI for generating .gitignore files from gitignore.io templates. Features smart search, multi-template selection, live preview, and intelligent caching for instant access to 571+ templates. Technologies: Python, TUI, CLI, PyPI, curses - [View Source](https://github.com/MKAbuMattar/igntui) - [PyPI Package](https://pypi.org/project/igntui/) ### Asciiquarium - Python Edition An aquarium/sea animation in ASCII art for your terminal! This is a Python reimplementation of the classic Perl asciiquarium, featuring multiple fish species, sharks, whales, ships, and sea monsters with smooth 30 FPS animation. Technologies: Python, TUI, ASCII Art, PyPI, Animation - [View Source](https://github.com/MKAbuMattar/asciiquarium-python) - [PyPI Package](https://pypi.org/project/asciiquarium/) ### Notebook - Browser-Based Markdown Editor Hi! You've found your new space for notes. It's a simple notebook that lives entirely in your browser. Since everything you type is saved automatically and tucked into the URL, your work stays private and follows you wherever you go all without needing an account. Technologies: Web, AstroJS, Markdown, Local Storage - [View Source](https://github.com/MKAbuMattar/notebook) - [Try Notebook](https://notebook.mkabumattar.com/)